JVN iPedia
http://jvndb.jvn.jp
Advisory
JVNDB-2026-025877
Apache TomcatのWebSocket chatサンプルにおけるサービス運用妨害（DoS）の脆弱性（2026年7月28日）
The Apache Software Foundationから、Apache Tomcatの脆弱性（CVE-2026-66299）に対してアドバイザリが公開されました。 Fixed in Apache Tomcat 11.0.25Fixed in Apache Tomcat 10.1.58Fixed in Apache Tomcat 9.0.121
cpe:/a:apache:tomcat
https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-025877.html
Common Vulnerabilities and Exposures (CVE)
CVE-2026-66299
https://www.cve.org/CVERecord?id=CVE-2026-66299
JVN
JVNVU#99139115
https://jvn.jp/vu/JVNVU99139115/index.html
The Apache Software Foundation
[SECURITY] CVE-2026-66299 Apache Tomcat - DoS via WebSocket chat example
https://lists.apache.org/thread/yrvw6mtm4hj84bpnosr9odgbgd8tnrx8
The Apache Software Foundation
Fixed in Apache Tomcat 11.0.25
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.25
The Apache Software Foundation
Fixed in Apache Tomcat 10.1.58
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.58
The Apache Software Foundation
Fixed in Apache Tomcat 9.0.121
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.121
2026-07-30T14:33:14+09:00
2026-07-30T14:33:14+09:00